Privacy policy

Last updated: 12.10.2026. This English version is a translation, for information only. The Romanian version is the legally binding one.

In short

We use your data to reply to you, book you in and treat you.

We don't sell it and we don't give it to anyone for advertising.

About your health, we only know what you tell us and what we find at the assessment, with your consent.

You can ask at any time to see, correct or delete what we know about you, at contact@fitwayclub.com.

1. Who we are

The data controller is SC FitwayClub SRL, which operates under the name Fitway Kinetoterapie Cluj.

Registered office: Cluj-Napoca, str. Alverna nr. 61, ap. 23
Trade Register: J12/6033/13.10.2017, tax ID (CUI) 38352900
Legal representative: Radu Conea
Clinic: Str. Alexandru Roșca nr. 5, Cluj-Napoca
Contact: contact@fitwayclub.com, 0757 693 543

We don't have a data protection officer (DPO), because the law doesn't require one for us. For any question about your data, write to us at contact@fitwayclub.com.

2. What data we have and where it comes from

From the contact form: your name, phone number, email and message. If you write in the message what hurts, that is information about your health. You give it to us, so we know what you're coming in with at the assessment.

When you write to us on WhatsApp, by email or call us: your phone number, your name and what you write.

At the assessment and during therapy: what hurts, since when, what accidents, operations and other pain you've had, the test results and, if you bring them, your MRI or X-rays. This is data about your health and we use it only to treat you. We keep your file on a tablet, in the GoodNotes app.

Filming: we film a session only with your consent, which we ask for beforehand.

From your visit to the site:

the server hosting the site automatically keeps the IP address and the page requested, for the site's security;
if you accept analytics cookies, Google Analytics shows us how many visits the site gets, which pages and where visitors come from. We don't find out who you are. The details are in the Cookie policy.

3. Why we use it and on what legal basis

To reply to you and book you in: Article 6(1)(b) GDPR, steps before a contract, at your request.
The assessment, therapy, kinetotherapy and training: Article 6(1)(b), the contract with you.
Information about your health, from messages and from the assessment: Article 9(2)(a), your explicit consent.
Invoices and accounting records: Article 6(1)(c), legal obligation.
Site visit statistics: Article 6(1)(a), your consent in the cookie banner.
Site security, meaning protection against attacks and against attempts to log in to the admin panel: Article 6(1)(f), our legitimate interest.

We don't make automated decisions about you and we don't profile you for advertising.

4. Who we share it with

Your data only goes to the companies that help us work, and only as much as they need for that:

GetSpace, the company hosting the site, in Romania;
Google Ireland Limited: email (contact@fitwayclub.com and the address that receives the contact form messages), Google Analytics and the map on the Contact page;
WhatsApp Ireland Limited, if you write to us on WhatsApp;
the accounting firm we work with, which sees the names on invoices;
the authorities, only when the law requires it.

We don't sell or rent data to anyone.

5. Data that leaves the European Union

Google and WhatsApp may transfer some data to the United States. The transfer is based on the European Commission's decision on the EU-U.S. Data Privacy Framework or on the Standard Contractual Clauses approved by the Commission.

6. How long we keep it

messages from the form, WhatsApp and email, if you don't become a client: at most 12 months from the last message;
the assessment and therapy file: 5 years from the last session, so we have your history if you come back;
invoices and accounting records: as long as accounting law requires;
Google Analytics statistics: at most 14 months.

7. Your rights

You have the right:

to find out what data we have about you and to get a copy;
to ask for it to be corrected;
to ask for it to be deleted, when we no longer have a legal reason to keep it;
to ask us to use it only partly, while we check an issue you raised;
to get it in a format you can take to another therapist;
to object to its use based on our legitimate interest;
to withdraw your consent at any time, for the future. What was done before remains valid.

Write to us at contact@fitwayclub.com and we'll reply within one month at most.

If you're not happy with the reply, you can complain to the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral Gheorghe Magheru nr. 28-30, sector 1, Bucharest, www.dataprotection.ro, or go to court.

8. How we protect it

The site only runs over a secure connection (HTTPS). The admin panel has two-step authentication and blocks repeated login attempts.

Only we have access to the messages and the client files. The tablet holding the files only opens with a code, a fingerprint or face recognition, and the files are not saved in the cloud.

If a data breach still happens and it could put you at risk, we notify the Authority within 72 hours at most and we notify you too.

9. Children

We also work with children. Their data is given to us by a parent or guardian, who also gives consent for it.

10. Changes

When we change something here, we update the date at the top.